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IN THE CLAIMS : 

1 1. (Original) An elliptic curve arithmetic operation device for performing one of an 

2 addition and a doubling on an elliptic curve E: y { 2=f(x) on a residue class ring of polynomials 

3 in two variables a and /?, moduli of the residue class ring being polynomials /? { 2-f(a) and h(a), 

4 where f(a)=a { 3+aa+b, a and b are constants, and h(a) is a polynomial in the variable a, the 

5 elliptic curve arithmetic operation device comprising: 



6 acquiring means for acquiring affine coordinates of at least one point on the 

7 elliptic curve E and operation information indicating one of the addition and the doubling, from 

8 an external source; 

9 transforming means for performing a coordinate transformation on the acquired 

10 affine coordinates to generate Jacobian coordinates, the coordinate transformation being 

11 transforming affine coordinates (a), fix<p,(a)) of a given point on the elliptic curve E using 

12 polynomials 

13 X(a)=f(a)x<l>(a) 

14 Y(a)=f(a) { 2x(p (a) 

15 Z(a)=l 

16 into Jacobian coordinates (X(a) :Y(a) : PxZ(a)), <f> (a) and (p (a) being 

17 polynomials; and 

18 operating means for performing one of the addition and the doubling indicated by 

19 the acquired operation information, on the generated Jacobian coordinates to obtain Jacobian 

20 coordinates of a point on the elliptic curve E. 
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1 2. (Original) The elliptic curve arithmetic operation device of Claim 1, 

2 wherein the acquiring means 

3 (a) in a first case acquires affine coordinates of two different points on the 

4 elliptic curve E and operation information indicating the addition, and 

5 (b) in a second case acquires affine coordinates of a single point on the elliptic 

6 curve E and operation information indicating the doubling, 

7 wherein the transforming means 

8 (a) in the first case performs the coordinate transformation on the acquired 

9 affine coordinates of the two different points to generate Jacobian coordinates of the two 

1 0 different points, and 

1 1 (b) in the second case performs the coordinate transformation on the acquired 

12 affine coordinates of the single point to generate Jacobian coordinates of the single point, and 

13 wherein the operating means 

14 (a) in the first case performs the addition indicated by the acquired operation 

15 information on the generated Jacobian coordinates of the two different points to obtain the 

16 Jacobian coordinates of the point on the elliptic curve £, and 

17 (b) in the second case performs the doubling indicated by the acquired 

18 operation information on the generated Jacobian coordinates of the single point to obtain the 

19 Jacobian coordinates of the point on the elliptic curve E. 

1 3. (Currently Amended) The elliptic curve arithmetic operation device of Claim 2, 

2 wherein in the first case 

3 the acquiring means acquires affine coordinates 

4 (Xl(a) f fixYl (a)) (j L (ah ^x<p L (a}j_ 
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5 (X2(a). /SxY2 (a)) Qfe (a). fSx<p?(a)) 

6 of the two different points on the elliptic curve E and the operation information 

7 indicating the addition, 

8 the transforming means performs the coordinate transformation on the acquired 

9 affine coordinates of the two different points to generate Jacobian coordinates 

10 (XI (a) :Yl(a) : jixZl(a)) 

1 1 (X2(a) : Y2(a) : fixZ2 (a)) 

12 of the two different points, and 

13 the operating means computes 

14 Ul(a) =Xl(a)xZ2(a) {2 

15 U2(a)=X2(a)xZl(a) (2 

16 Sl(a) =Yl(a) xZ2(a) {3 

17 S2(a)=Y2(a)xZl(a) {3 

18 H(a)=U2(a) -Ul(a) 

19 r(a)=S2(a) -SI (a) 

20 and computes 

21 X3(a) =-H(a) { 3-2xUl(a)xH(a) { 2+r(a) (2 

22 Y3(a) =-Sl(a) xH(a) (3+r (a) x (Ul(a)xH(a) { 2-X3 (a)) 

23 Z3(a)=Zl(a) xZ2(a) xH(a) 

24 to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a) of the point on the elliptic 

25 curve E. 
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1 4. (Currently Amended) The elliptic curve arithmetic operation device of Claim 2, 

2 wherein in the second case 

3 the acquiring means acquires affine coordinates 

4 (XUa). faYKa)) (<f > L (a). ^x 9l (a)) 

5 of the single point on the elliptic curve E and the operation information indicating 

6 the doubling, 

7 the transforming means performs the coordinate transformation on the acquired 

8 affine coordinates of the single point to generate Jacobian coordinates 

9 (XI (a) :Yl(a) :pxZl(a)) 

10 of the single point, and 

1 1 the operating means computes 

12 S(a)=4xXl(a)xYl(a) {2 

13 M(a)=3xXl(a) { 2+axZl(a) { 4xf(a) {2 

14 T(q)=-2xS(a)+M(a) {2 

15 and computes 

16 X3(a)=T(a) 

17 Y3(a)=-8xYl(a) { 4+M(a)x(S(a)-T(a)) 

1 8 Z3(a)=2xYl (a)xZl(a) 

19 to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the elliptic 

20 curve E. 
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1 5. (Currently Amended) The elliptic curve arithmetic operation device of Claim 2, 

2 wherein the acquiring means 

3 (a) in the first case acquires affine coordinates 

4 (Xl(a), PxYl(a)) ( </> L (al ftxmM) 

5 (X2(al fixY2(q)) Q fe (a), ftxvifa)) 

6 of the two different points on the elliptic curve E and the operation information 

7 indicating the addition, and 

8 (b) in the second case acquires affine coordinates 

9 (Xl(al fixYlfa)) ( <f> L (al fixyM) 

10 of the single point on the elliptic curve E and the operation information indicating 

1 1 the doubling, 

12 wherein the transforming means 

13 (a) in the first case performs the coordinate transformation on the acquired 

14 affine coordinates of the two different points to generate Jacobian coordinates 

15 (XI (a) :Yl(a) :fixZl(q)) 

16 (X2(a) :Y2(a) :fixZ2(a)) 

17 of the two different points, and 

18 (b) in the second case performs the coordinate transformation on the acquired 

19 affine coordinates of the single point to generate Jacobian coordinates 

20 (XI (a) :Yl(a) :fixZl(a)) 

21 of the single point, and 

22 wherein the operating means 
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23 (a) in the first case computes 

24 Ul(a) =Xl(a)xZ2(a) {2 

25 U2(a) =X2(a)xZl(a) {2 

26 SI (a) =Yl(a)xZ2(a) {3 

27 S2(a) =Y2(a)xZl(a) { 3 

28 H(a) =U2(a) -Ul(a) 

29 r(a) =S2(a) -Sl(a) 

30 and computes 

31 X3(a) =-H(a) { 3-2xUl(a)xH(a) { 2+r(a) (2 

32 Y3(a) =-Sl(a)xH(a) { 3+r(q)x(Ul(a)xH(a) { 2-X3(a)) 

33 Z3(a) =Zl(a) xZ2(a)xH(a) 

34 to obtain Jacobian coordinates (X3(a) :Y3(a) :f$xZ3(a)) of the point on the elliptic 

35 curve £, and 

36 (b) in the second case computes 

37 S(a) =4xXl(a)xYl(a) {2 

38 M(a) =3xXl(a) { 2+axZl(a) { 4xf(a) {2 

39 T(a) =-2xS(a)+M(a) {2 

40 and computes 

41 X3(a)=T(a) 

42 Y3(a) =-8xYl(a) { 4 +M(a)x(S(a) -T(a)) 

43 Z3(a) =2xYl(a)xZl(a) 

44 to obtain the Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the 

45 elliptic curve E. 
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1 6. (Original) An elliptic curve order computation device for computing an order of 

2 an elliptic curve according to a Schoof-Elkies-Atkin algorithm, comprising the elliptic curve 

3 arithmetic operation device of Claim 1 . 

1 7. (Original) The elliptic curve order computation device of Claim 6 comprising the 

2 elliptic curve arithmetic operation device of Claim 2. 

1 8. (Original) The elliptic curve order computation device of Claim 7 comprising the 

2 elliptic curve arithmetic operation device of Claim 5. 

1 9-22. (Cancelled) 

1 23. (Currently Amended) An elliptic curve arithmetic operation method used in an 

2 elliptic curve arithmetic operation device equipped with an acquiring means, a transforming 

3 means, and an operating means, for performing one of an addition and a doubling on an elliptic 

4 curve E: y { 2=f(x) on a residue class ring of polynomials in two variables a and /?, moduli of the 

5 residue class ring being polynomials /? { 2-f(a) and h(a), where f(a)=a { 3+aa+b, a and b are 

6 constants, and h(a) is a polynomial in the variable a, the elliptic curve arithmetic operation 

7 method comprising: 

8 an acquiring step performed by the acquiring means, for acquiring affine 

9 coordinates of at least one point on the elliptic curve E and operation information indicating one 

10 of the addition and the doubling, from an external source; 

11 a transforming step performed by the transforming means, for performing a 

12 coordinate transformation on the acquired affine coordinates to generate Jacobian coordinates, 
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13 the coordinate transformation being transforming affine coordinates (tf> (a), ftx(p(a)) of a given 

14 point on the elliptic curve E using polynomials 

15 X(a)=f(a)x<f>(a) 

16 Y(a) =f(a) { 2x<p (a) 

17 Z(a) = 1 

18 into Jacobian coordinates (X(a) :Y(a) :fixZ(a)), <j> (a) and <j> (a) o(a) being 

19 polynomials; and 

20 an operating step performed by the operating means, for performing one of the 



21 addition and the doubling indicated by the acquired operation information, on the generated 

22 Jacobian coordinates to obtain Jacobian coordinates of a point on the elliptic curve E. 

1 24. (Cancelled) 

1 25. (Original) A computer-readable storage medium storing an elliptic curve 

2 arithmetic operation program used in an elliptic curve arithmetic operation device equipped with 

3 acquiring means, transforming means, and operating means, for performing one of an addition 

4 and a doubling on an elliptic curve E: y { 2=f(x) on a residue class ring of polynomials in two 

5 variables a and £ moduli of the residue class ring being polynomials p { 2-f(a) and h(a), where 

6 f(a) =cc { 3+aa+b, a and b are constants, and h(a) is a polynomial in the variable a, the elliptic 

7 curve arithmetic operation program comprising: 

8 an acquiring step performed by the acquiring means, for acquiring affine 

9 coordinates of at least one point on the elliptic curve E and operation information indicating one 
10 of the addition and the doubling, from an external source; 
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11 a transforming step performed by the transforming means, for performing a 

12 coordinate transformation on the acquired affme coordinates to generate Jacobian coordinates, 

13 the coordinate transformation being transforming affine coordinates ((f) (a), fix(p(a)) of a given 

14 point on the elliptic curve E using polynomials 

15 X(a)=f(a)x<f>(a) 

16 . Y(a) =f(q) { 2x<p (a) 

17 Z(a) =1 

18 into Jacobian coordinates (X(a) :Y(a) :^xZ(a)) y <f> (a) and (p (a) being polynomials; 

19 and 

20 an operating step performed by the operating means, for performing one of the 

21 addition and the doubling indicated by the acquired operation information, on the generated 

22 Jacobian coordinates to obtain Jacobian coordinates of a point on the elliptic curve E. 

1 26. (Original) The storage medium of Claim 25, wherein the acquiring step 

2 (a) in a first case acquires affine coordinates of two different points on the 

3 elliptic curve E and operation information indicating the addition, and 

4 (b) in a second case acquires affine coordinates of a single point on the elliptic 

5 curve E and operation information indicating the doubling, 

6 wherein the transforming step 

7 (a) in the first case performs the coordinate transformation on the acquired 

8 affine coordinates of the two different points to generate Jacobian coordinates of the two 

9 different points, and 

10 (b) in the second case performs the coordinate transformation on the acquired 

1 1 affine coordinates of the single point to generate Jacobian coordinates of the single point, and 
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12 wherein the operating step 

13 (a) in the first case performs the addition indicated by the acquired operation 

14 information on the generated Jacobian coordinates of the two different points to obtain the 

15 Jacobian coordinates of the point on the elliptic curve £, and 

16 (b) in the second case performs the doubling indicated by the acquired 

17 operation information on the generated Jacobian coordinates of the single point to obtain the 

1 8 Jacobian coordinates of the point on the elliptic curve E. 

1 27. (Currently Amended) The storage medium of Claim 26, wherein in the first case 

2 the acquiring step acquires affine coordinates 

3 (Xl(a) f fixYlfq)) Qj> L (ah § M L m 

4 (X2(al pxY2(a)) Q fe (a). fa^fa)) 

5 of the two different points on the elliptic curve E and the operation information 

6 indicating the addition, 

7 the transforming step performs the coordinate transformation on the acquired 

8 affine coordinates of the two different points to generate Jacobian coordinates 

9 (Xl(a) :Yl(a) :0xZl(a)) 

1 0 (X2(a) : Y2(a) :fixZ2(a)) 

1 1 of the two different points, and 

12 the operating step computes 

13 Ul(a) =Xl(a)xZ2(a) {2 

14 U2(a) =X2(a)xZl(a) {2 

15 Sl(a) =Yl(a)xZ2(a) {3 

16 S2(a) =Y2(a)xZl(a) {3 
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17 H(a) =U2(a) -Ul(a) 

18 r(a) =S2(a) -Sl(a) 

19 and computes 

20 X3(a) =-H(q) { 3-2xUl(a)xH(a) { 2+r(a) {2 

21 Y3(a) =-Sl(a)xH(a) { 3+r(a)x(Ul(a)xH(a) { 2-X3(a)) 

22 Z3(a) =Zl(a)xZ2(a)xH(a) 

23 to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the elliptic 

24 curve E. 

1 28. (Currently Amended) The storage medium of Claim 26, 

2 wherein in the second case the acquiring step acquires affine coordinates 

3 (Xl(a), fixYlfa}) Q k (ah M i M - 

4 of the single point on the elliptic curve E and the operation information indicating 

5 the doubling, 

6 the transforming step performs the coordinate transformation on the acquired 

7 affine coordinates of the single point to generate Jacobian coordinates 

8 (XI (a) :Yl(a) :fixZl(q)) 

9 of the single point, and 

10 the operating step computes 

1 1 S(a) =4xXl(a)xYl(a) { 2 

12 M(a) =3xXl(a) {2+axZl(a) { 4xf(a) {2 

13 T(a) =-2xS(a) +M(a) {2 
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14 and computes 

15 X3(a) =T(a) 

16 Y3(a) =-8xYl(a) { 4+M(a)x(S(a) -T(a)) 

17 Z3(a) =2xYl(a)xZl(a) 

18 to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the elliptic 

19 curved. 

1 29. (Currently Amended) The storage medium of Claim 26, 

2 wherein the acquiring step 

3 (a) in the first case acquires affine coordinates 

4 (Xl(al pxYl(a)) (</> L (a), ^xio L (a)) 

5 (X2(al fixY2(a)) (tfh (a), gmMl 

6 of the two different points on the elliptic curve E and the operation information 

7 indicating the addition, and 

8 (b) in the second case acquires affine coordinates 

9 (Xl(a), pxYl(a)) (<f> L (a), fix<p L fa)) 

10 of the single point on the elliptic curve E and the operation information indicating 

1 1 the doubling, 

1 2 wherein the transforming step 

13 (a) in the first case performs the coordinate transformation on the acquired 

14 affine coordinates of the two different points to generate Jacobian coordinates 

15 (Xl(a) :Yl(a) :pxZl(a)) 

16 (X2(a) :Y2(a) :fixZ2(a)) 

17 of the two different points, and 
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18 (b) in the second case performs the coordinate transformation on the acquired 

19 affine coordinates of the single point to generate Jacobian coordinates 

20 (Xl(a) :Yl(a) :fixZl(a)) 

21 of the single point, and 

22 wherein the operating step 

23 (a) in the first case computes 

24 Ul(a) =Xl(a)xZ2(a) {2 

25 U2(a) =X2(a)xZl(a) {2 

26 Sl(a) =Yl(a)xZ2(a) { 3 

27 S2(a) =Y2(a)xZl(a) {3 

28 H(a) =U2(a) -Ul(a) 

29 r(a) =S2(a) -Sl(a) 

30 and computes 

31 X3(a) =-H(a) { 3-2xUl(a)xH(a) { 2+r(a) {2 

32 Y3(a) =-Sl(a)xH(a) { 3+r(a)x(UJ (a)xH(a) { 2-X3(a)) 

33 Z3(a) =Zl(a)xZ2(q)xH(a) 

34 to obtain Jacobian coordinates (X3(a) :Y3(a) :pxZ3 (a)) of the point on the elliptic 

35 curve E, and 

36 (b) in the second case computes 

37 S(a) =4xXl(a)xYl(a) {2 

38 M(a) =3xXl(a) { 2+axZl(a) { 4xf(a) {2 

39 T(a) =-2xS(a) +M(a) {2 
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40 and computes 

41 X3(a) =T(a) 

42 Y3(a) =-8xYl(a) { 4+M(a) x(S(a) -T(a)) 

43 Z3(a) =2xYl(a)xZl(a) 

44 to obtain the Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the 

45 elliptic curve E. 

1 30-33. (Cancelled) 
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